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Master Server accepts connection from CKU Server 
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Master Server acknowledges connection 
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Master Server receives CKU Server CKDRM 
Certificate, engine's CKDRM Certificate, media SC1D 
and DFS file handles from CKU Server 
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Master Server verifies validity of both certificates by, 
for example, checking MAC and PKI signatures 
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Master Server checks Revocation database to make 
sure there are no revoked certificates pending 
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Master Server retrieves requested Key Complements 
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Client accesses formatted URL, such as URL 
on media disk or URL associated with serial 
number on media disk or other source 
3410 
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Client presents query string containing SCID 
and locked content status 
3420 



J 

Web server constructs page to present offers 
to consumer using data from Offers and Ul 
Elements databases 
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Web server delivers "Unlocking in Progress" 
page to client 
3440 
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Web server generates unique SessionID that 
is used later to commit transaction after 
unlock process is verified 
3450 
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Web page embeds CKU Client object and 
contains client-side script that tells CKU Client 
to begin unlock process 
3454 
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Web server stores the SCID and list of D FS 

File Handles indexed by SessionID in 
Transaction Database for later use by CKU 
Server object 
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Engine receives handle and key 
complement to key box 
3610 



Engine performs key box look up 
3620 



Keys within key box are 
unbound and decrypted 
3630 



Keys are rebound, encrypted 
and locked 
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Process Start 




DataPlay Media 
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DataPlay-enabled 
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via the USB port 
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DCS Order Mgmt Server inserts records DCS_STAGE table 
with or without a Media ID 
3802 



DCS Order Mgmt Serve generates a web page with a CKU 
Client instantiated with a Transaction ID 
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CKU Client obtains the Engine's CKDRM Certificate 
3806 



CKU Client obtains the unique Media ID (if this is not 
already established the engine will do so) 
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CKU Client obtains the Server's ContentKey Certificate 
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CKU Client obtains the ESessionKey from the Engine using 
the CKU Server's CKDRM Certificate 
3812 



CKU Client makes final unlock request for validating and/or 
updating the DCS_STAGE table with the Media ID, 
authenticating the Engine, obtaining the File Handle/Key 
Complement/Version list and Wrapping the File Set 
3814 



CKU Client sends the wrapped file set to the Engine so the 
Engine can unlock the content 
3816 
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CKU Client sends the final transaction status message to 
the server and displays a Trx Complete" message to 
customer/user 
3818 



DCS Order Mgmt Server receives the status complete 
notice, and deletes DCS_STAGE records for that 
transaction and updates transaction 
3820 
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Receive media containing locked content 
4002 
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Auto- Run Handler (or Content Manager) requests and obtains a Contents. ddl 

file 

40Q4 
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Auto-Run Handler (or Content Manager) parses the Contents.ddl fie to obtain 
the PackageCollectionID, PackageCollectionSKU, UnlockURL, Primary 
PackageSKU List + Business Entity ID, and a list of previously unlocked 
PackageSKU's 
4006 
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Auto- Run Handler (or Content Manager) appends the data to the URL and 
opens the default browser which will display a web page created by the eTailer 

4008 
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ETailer presents user/customer with a series of pages to process the 
eCommerce transaction 
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After a user/customer completes the transaction (e.g. clicking button and 
prompting eTailer) thereby requesting eTailer to notify the DCS of the 
ContentKey Unlock Transaction, eTailer passes the DCS the PC ID, and a list 
of PackageSKU's that are to be unlocked 
4012 
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The DCS Order Mgmt component generates a unique Transaction ID and will 
insert one record for each Package purchased. At this point, the Media ID is 
not know so it will contain a null value. 
Jls* 40J4 
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The DCS replies to the eTailer with a failure message or a URL that the user/ 
customer uses to unlock content The Unlock URL contains the Transaction ID 
that was generated by the DCS. 
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The eTailer generates a final confirmation and unlock instructions page that 
contains the Unlock URL. 
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